Privacy Policy

Introduction

1Autism ("1Autism," "we," "us," or "our") operates the 1autism.com website and the 1Autism mobile application (together, the "Platform"), connecting Filipino families to therapy centers for children with developmental needs. This Privacy Policy explains what personal information we collect, how we use it, and the rights you have under the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

By using the Platform, you agree to the collection and use of your information as described in this Privacy Policy.

Information We Collect

If you are a parent or guardian:

• Full name, mobile number, and email address
• Your child's first name, age, and the type(s) of therapy needed (occupational, speech, behavioral, ABA, or special education)
• Your activity on the Platform, including which centers and waitlists you've joined

If you are a therapy center:

• The name, email address, and phone number of your business's authorized representative
• Your branch information: address, operating hours, therapy services offered, and pricing
• A business verification document (DTI Certificate of Registration, SEC Certificate of Registration, or BIR Certificate of Registration) submitted at signup
• Billing information processed through our payment partner, Xendit. We do not store your card number.

How We Use Your Information

We use the information above to:

• Match parents with therapy centers and manage waitlist entries
• Verify that a listed therapy center is a legitimately registered business
• Process payments for center subscriptions
• Send you updates about your account, waitlist status, or center activity
• Maintain, secure, and improve the Platform
• Comply with our legal obligations

Business Verification Documents

When a therapy center registers on 1Autism, we require a business verification document to confirm the center is a real, registered business before it can be listed. This document is:

• Used solely for verification
• Reviewed by an authorized 1Autism administrator
• Stored securely, with access limited to the administrator conducting the review
• Permanently deleted once a decision is made to approve or reject the registration. We do not keep a copy after that point.

Children's Information

Children do not create accounts or interact directly with the Platform. All information about a child is provided and managed by a parent or legal guardian. We collect the minimum needed to match a child with an appropriate therapy service — first name, age, and therapy type — and this is shared only with the specific therapy center(s) the parent has joined a waitlist with.

How We Share Information

We do not sell your personal information. We share it only:

• With a therapy center, once you join that center's waitlist — the center receives your contact details and your child's information to manage your waitlist entry
• With service providers who help us operate the Platform: Supabase (database and hosting), Xendit (payment processing), Firebase (push notifications), and Google and Apple (account sign-in)
• When required by law, regulation, legal process, or a valid government request

Data Retention

• Business verification documents: deleted upon approval or rejection of the center's registration
• A center's account and waitlist data: retained for 30 days after cancellation, then permanently deleted
• Parent and child information: retained while your account is active, and deleted upon a verified request to delete your account

Your Rights

Under the Data Privacy Act of 2012, you have the right to:

• Be informed that your personal information is being processed
• Access the personal information we hold about you
• Correct any inaccurate or outdated personal information
• Object to the processing of your personal information
• Request that we erase or block your personal information
• Obtain a copy of your personal information in a portable format
• Lodge a complaint with the National Privacy Commission (NPC)

To exercise any of these rights, contact us using the details in the Contact Us section below.

Data Security

We take reasonable and appropriate measures to protect your information, including:

• Encryption of data in transit and at rest
• Role-based access controls, so each user only sees information relevant to their role
• Restricted internal access to sensitive information, including business verification documents

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Platform or by email before they take effect.

Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, contact us at kiko@1autism.com.